Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File:                     h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier:          ddLxdIs8NfCL3+PO6RoRsUAhmBb/kkcGwRH5C0oF2Rc=
Subject key identifier:   41:CD:9D:AB:BA:F3:C9:37:A7:8F:AC:8C:3B:B0:AA:6B:5F:61:E4:13
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer:       /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number:          AF
Signing time:             Tue 04 Nov 2025 06:29:30 +0000
Manifest this update:     Tue 04 Nov 2025 06:29:30 +0000
Manifest next update:     Thu 06 Nov 2025 06:29:30 +0000
Files and hashes:         1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: I7IRtrYnNqzUhUR8wdfAezyOPaM4FCGEYnZ2KC8A+p8=)
                          2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
                          3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
        Validity
            Not Before: Nov  4 06:29:30 2025 GMT
            Not After : Nov  6 06:29:30 2025 GMT
        Subject: CN=69099d4a-6be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:8c:c3:6d:f5:da:f2:36:94:15:04:36:02:
                    ba:34:68:9e:11:f4:1a:c3:cf:c5:07:6b:e6:b1:0d:
                    3a:75:e2:61:4b:9b:69:5d:06:13:d3:1a:31:56:f1:
                    20:ec:4d:63:31:9e:1c:d1:39:96:17:db:a6:a4:d7:
                    88:51:8f:a6:8e:b7:d8:a5:77:15:5f:39:75:14:6c:
                    37:02:5b:f7:2a:71:1c:7d:83:13:14:c1:9c:9e:0e:
                    23:a8:69:a2:ca:f8:62:0c:93:ed:d9:cc:58:90:d3:
                    c0:db:97:86:74:c9:1a:f4:22:96:64:ca:c8:38:44:
                    90:87:a5:cf:5c:2d:66:51:0a:f0:75:1d:1a:c8:71:
                    f8:7b:49:7c:8c:0f:9b:66:10:c3:50:bd:be:f7:31:
                    65:3d:2a:09:83:f6:4b:48:b1:a1:6a:2c:eb:6f:7d:
                    aa:7b:4a:71:83:85:b6:41:14:1c:df:9f:5f:3f:17:
                    0f:ff:fd:01:31:30:3e:c1:f3:6b:d9:3c:77:55:79:
                    09:0d:59:fb:5e:bb:38:32:9d:6f:c2:46:b1:ed:58:
                    96:76:91:7d:e7:77:f4:28:ca:33:55:93:b2:d1:b2:
                    f8:97:86:b5:e3:9a:4b:8d:6f:39:61:fd:e9:3c:cc:
                    7d:e4:03:4d:38:f0:fe:6f:ef:83:be:03:c8:c3:5f:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CD:9D:AB:BA:F3:C9:37:A7:8F:AC:8C:3B:B0:AA:6B:5F:61:E4:13
            X509v3 Authority Key Identifier:
                keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:9e:d6:fa:41:86:d5:43:4b:c5:98:f9:51:b8:cf:fe:2e:
         3c:44:72:e7:ff:da:18:e6:66:cd:c8:2e:87:95:82:09:07:06:
         35:b6:b8:ee:6d:5d:97:26:1e:24:61:f2:7a:d1:5d:0c:81:97:
         ef:ed:82:01:11:14:e2:af:5c:b3:b9:97:7d:b7:60:2f:56:fa:
         ef:3e:ba:c8:5d:66:f7:72:a3:b4:a2:5d:76:a5:81:be:7e:99:
         f0:fb:5f:96:19:7c:dd:fe:0c:19:3d:2e:94:a4:fc:07:2a:97:
         ea:c8:1f:dc:a6:4e:4b:29:20:21:06:b0:c2:f2:ff:21:04:96:
         56:1d:0d:83:a9:5e:8d:37:cd:47:71:56:27:09:3e:fe:25:be:
         da:e2:b7:6e:8f:b4:7a:99:40:b2:4d:c5:19:85:aa:fe:88:a7:
         3a:9d:1b:3b:d5:4f:30:f8:32:67:21:dd:27:65:72:8a:f9:e3:
         c5:5f:df:79:82:f7:bd:fb:c0:31:42:be:aa:01:22:9c:33:6d:
         50:40:e7:da:f0:0f:66:7d:17:78:83:5f:ea:9b:65:0d:8a:55:
         32:72:14:3f:c3:78:02:da:a1:4d:ed:a4:aa:8f:be:25:33:95:
         b3:e1:6d:d7:a4:6f:ce:c6:d7:6e:96:e6:ff:ce:02:40:fb:e5:
         2d:31:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:46 2025 by rpki-client